51 results · Feed
-
Unscored —
AppArmor cupsd Sandbox Bypass Due to Use of Hard Links
The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.…
-
Unscored —
The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote a…
-
Unscored —
A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS …
-
Unscored —
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-v…
-
Unscored —
Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers …
-
Unscored —
The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a fi…
-
Unscored —
The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote att…
-
Unscored —
CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3)…
-
Unscored —
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack …
-
Unscored —
Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allow…